Static task
static1
Behavioral task
behavioral1
Sample
8600887262c74194d81df5ee1269d95a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8600887262c74194d81df5ee1269d95a.exe
Resource
win10v2004-20231215-en
General
-
Target
8600887262c74194d81df5ee1269d95a
-
Size
32KB
-
MD5
8600887262c74194d81df5ee1269d95a
-
SHA1
75bd820cac669837773c67dab7cb7dc0f1bf6edd
-
SHA256
7437a211c6976d582cc052f7f0d520a430522bb0180d5c5d65d94fdf2ebb1635
-
SHA512
31c31f358ef276632582f022835c397a52b45741f8bbdffc11b62608060f18e4e12570eca13fe4f45b00ceffe70980fe5387da348ef8f373bfd235150ebe6e7c
-
SSDEEP
768:Ern5iLGidH87hoBt9QJdpDbznfi4/uU/qY6GGDsytu:8n4LG+HyitAjiouUr3+p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8600887262c74194d81df5ee1269d95a
Files
-
8600887262c74194d81df5ee1269d95a.exe windows:4 windows x86 arch:x86
9b3b0677ce178a70d3f915f31c749702
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
GetPropW
SetMenu
DestroyIcon
PrivateExtractIconExA
CascadeWindows
kernel32
VirtualProtect
SetCalendarInfoA
DeviceIoControl
IsDebuggerPresent
GetConsoleKeyboardLayoutNameW
GetModuleHandleW
GetLastError
gdi32
FONTOBJ_vGetInfo
GdiEntry13
CreateICA
AbortDoc
GetArcDirection
comdlg32
dwLBSubclass
GetSaveFileNameW
Sections
.text Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE